test.terralibro.es
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ff:cc:b2:78:57:5f:e2:4e:c6:79:31:bf:4c:88:75:e0:0c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=test.terralibro.es
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ff:cc:b2:78:57:5f:e2:4e:c6:79:31:bf:4c:88:75:e0:0cSerial Number (int): 348380950540912667402537961365288181424140
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5f:d2:f8:3d:5c:eb:03:5b:e3:5d:98:2f:e1:b5:8f:33:be:ed:1f:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 15:c7:b9:d1:a0:0a:4b:eb:44:e9:87:79:61:d8:0b:37:b6:79:90:78
Fingerprint (sha256): 5a:7b:79:8c:1a:dc:2f:62:fd:c8:92:30:ac:13:b9:57:e3:d3:6f:48:70:64:88:18:0c:c8:fe:75:fc:f4:91:7d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate test.terralibro.es
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.terralibro.es
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test.terralibro.es
Other certificates including the domain name terralibro.es
(limited to 100 certificates)
images.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
test.terralibro.es
images.terralibro.es
images.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
images.terralibro.es
images.terralibro.es
www.terralibro.es
test.terralibro.es
images.terralibro.es
terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
test.terralibro.es
images.terralibro.es
images.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
images.terralibro.es
images.terralibro.es
www.terralibro.es
test.terralibro.es
images.terralibro.es
terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
terralibro.es
www.terralibro.es
test.terralibro.es
www.terralibro.es
www.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
images.terralibro.es
www.terralibro.es
Certificate
The complete raw certificate details for test.terralibro.es in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgISA//MsnhXX+JOxnkxv0yIdeAMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTkwMzQxMDFaFw0x ODEyMTgwMzQxMDFaMB0xGzAZBgNVBAMTEnRlc3QudGVycmFsaWJyby5lczCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2TRUY7i7F8UsLcXRPpqP1lWrTM ZXC6kiKxFcV1qlaFxvkvqWauI41nq1Rvfw8nYf9unEK99dfvUPgdQoWzzbJsiPJy JW8KpPQAwhiHMlWi1GQF3RmcrjTTnwn2N8DnbuJgRqUMZdpvBOxFlAcJdeVaGdPH AB8PzchDe9fNfqhTYJzeRliuMx4qkEPU4lsVc1/F50Ri8SrxvQ8KrhHDNjZ6ETXi WHgHP1tuZNZ7HTvk9Qs3PWHYtQ6d0aIToX4Rt5Xo3RRRCoHXwJJ7tCI637q28KtX tw/9AHT70vJhLQ/Tl6YtHBoKZlDczObfKmeIU9tIU9gaU0hiz/enK/4PmsPAfai+ oR3T9Yh7PTYucVDyCzJiQWVxu82QxvHUTAGSRMEjh9cf3YVThaTd3WoVtPzlG8zj RpSkffFrB8Thd3vST+yRAZBPKnQ3EEKDYk6lPNtgHlP4sNNq0rTdOmpQMM/vp2hy +nrquFT7leFQUwnvz1M+Wwt3L2LkaR+xMlpvbCk3R6e1GYUzb+UE8Nb9W7rzi4rA AerP/jnPEojB2i+gH0b9il1vXlx6A3JA2mKFWptzr+QFOWrFhD+et4W5+fq6YbVC SHSz7ioXjbcxePpWVbIgGDuSqg1FPzG8LEMXeYtYonIQJTjqS9m1rmMPSNSzcGtq Bgu8NOyUl9c4p+ePAgMBAAGjggMaMIIDFjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FF/S+D1c6wNb412YL+G1jzO+7R9yMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISdGVzdC50ZXJyYWxp YnJvLmVzMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWXwIaRZAAAEAwBH MEUCIG078UayEw24VG3JoA4CQZkiCXZH2URz5m4zWM8vbeIRAiEAot1ZjJFj1LcA iap0RIM4xuVhEHb8zgpfZVUBbgR+D+0AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWXwIaUIAAAEAwBHMEUCIQDm9mNqxCY5dbhWg4zvTpU+3/Wg PL4qoHhaofGTSOG51gIgFcixVG79yEbqFGkxWitFE+yGJCTSFzIjfa3J2VsY45Ew DQYJKoZIhvcNAQELBQADggEBACRJyav0fyIP5gaF1cZ6v82o+77U5N70W6ac4QIx MAzXDLIU9uBE42KROgUqaONg+VT/5glVIHCQwrH+2SrRG5MtnWDUYXvWfayKDc3O 4p7vgGHQKkX35aEFU8tm5Ou2CvX1koTZehK/UXGHo9PHFz9u/LBgwGnE8xsOzUw1 pxE+M+fPKQE5t+0uIgufz+tfodj0zl3eRi0SJn+GxEDH7XeIOQzZ8E1aVY8xf9D6 QGm3+6yO6C2EXuGN6qVKZ+bf/NlKeKCIb+pWMjhkZXXqznaSRPJCYZprjhOmOD7r FT+AZn8tlk16q17rxfimFrpZMEy8ONHUafRiY17bkqmQc8o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArZNFRjuLsXxSwtxdE+mo /WVatMxlcLqSIrEVxXWqVoXG+S+pZq4jjWerVG9/Dydh/26cQr311+9Q+B1ChbPN smyI8nIlbwqk9ADCGIcyVaLUZAXdGZyuNNOfCfY3wOdu4mBGpQxl2m8E7EWUBwl1 5VoZ08cAHw/NyEN7181+qFNgnN5GWK4zHiqQQ9TiWxVzX8XnRGLxKvG9DwquEcM2 NnoRNeJYeAc/W25k1nsdO+T1Czc9Ydi1Dp3RohOhfhG3lejdFFEKgdfAknu0Ijrf urbwq1e3D/0AdPvS8mEtD9OXpi0cGgpmUNzM5t8qZ4hT20hT2BpTSGLP96cr/g+a w8B9qL6hHdP1iHs9Ni5xUPILMmJBZXG7zZDG8dRMAZJEwSOH1x/dhVOFpN3dahW0 /OUbzONGlKR98WsHxOF3e9JP7JEBkE8qdDcQQoNiTqU822AeU/iw02rStN06alAw z++naHL6euq4VPuV4VBTCe/PUz5bC3cvYuRpH7EyWm9sKTdHp7UZhTNv5QTw1v1b uvOLisAB6s/+Oc8SiMHaL6AfRv2KXW9eXHoDckDaYoVam3Ov5AU5asWEP563hbn5 +rphtUJIdLPuKheNtzF4+lZVsiAYO5KqDUU/MbwsQxd5i1iichAlOOpL2bWuYw9I 1LNwa2oGC7w07JSX1zin548CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348380950540912667402537961365288181424140 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 03:41:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 03:41:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.terralibro.es' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708125344242378902686333535000685790676120075928510174456289973142174282055298408762881390255989064310520792475853382494483304234435743959605012653809026558098470360917253075112365673022962755103493341779768263248068709196558496727774066006927561693952516814648694556077179610153633236934747709464006124917816066824507466051715631874074623200893657234811761142563886496268141941521054879460068019814325703962788398346362427303119764231759727252397413651614532023066219625703720799956914689025326588221040858247828551222001813351736413513087284436881794212776551466250973604898757383517733296837537824086930848023188868305188503648153190931810408741601029499029882914049384678596282655975331921368458700467050465090425411662573478185276126528281047149614962737060154235211587083006579384844742354336799794092669560890057748180978448514151457158182741869675402879067784622832002488212840731618247358019502741386083813180606241376031197110712409261470246803106452948379039341591595036119079232183183563884643842055114185462965619312053215015772067394703851493038579460997532413542123453106711413145379834705276416719709475557429793246343257617340194842364324488457517342131342753589519923042334051373571876882466245081864899528067901327 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5fd2f83d5ceb035be35d982fe1b58f33beed1f72 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.terralibro.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165f021a459000004030047304502206d3bf146b2130db8546dc9a00e02419922097647d94473e66e3358cf2f6de211022100a2dd598c9163d4b70089aa74448338c6e5611076fcce0a5f6555016e047e0fed007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165f021a5080000040300473045022100e6f6636ac4263975b856838cef4e953edff5a03cbe2aa0785aa1f19348e1b9d6022015c8b1546efdc846ea1469315a2b4513ec862424d21732237dadc9d95b18e391 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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